CVE-2020-9041: Couchbase Server

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections.

Affected products

• Couchbase Couchbase Server: version 6.0.3 only
• Couchbase Sync Gateway: up to and including 2.7.0

Published 2020-06-08. Last modified 2026-06-17.